You can filter the accounts to be run against by either passing the
account name or id via the -a flag, which can be specified multiple
times.

Groups of accounts can also be selected for execution by specifying
the -t tag filter. Account tags are specified in the config
file. ie given the above accounts config file you can specify all prod
accounts with -ttype:prod.

You can specify which policies to use for execution by either
specifying -p or selecting groups of policies via their tags with
-l.

Each account/subscription/project configuration in the config file can
also define a variables section vars that can be used in policies’
definitions and are interpolated at execution time. These are in
addition to the default runtime variables custodian provides like
account_id, now, and region.

Note Variable interpolation is sensitive to proper quoting and spacing,
i.e., {charge_code} would be invalid due to the extra white space. Additionally,
yaml parsing can transform a value like {charge_code} to null, unless it’s quoted
in strings like the above example. Values that do interpolation into other content
don’t require quoting, i.e., “my_{charge_code}”.